Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
File:                     dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json)
Hash identifier:          wZFwYAqz5I49uBvUmPmApgzPiK4yJzd0yp0ZwSmDzMg=
Subject key identifier:   07:38:FC:A0:09:54:43:04:08:BA:B5:9B:4D:3E:BE:4B:57:6B:3D:4B
Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97
Certificate issuer:       /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
Manifest number:          061D
Signing time:             Tue 18 Aug 2026 23:07:51 +0000
Manifest this update:     Tue 18 Aug 2026 23:07:51 +0000
Manifest next update:     Tue 25 Aug 2026 23:07:51 +0000
Files and hashes:         1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: jetlZq6Osn4Ywnt1ktA9baaGzUx/lOy2e8GPqIQeq4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl
                          rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997
        Validity
            Not Before: Aug 18 23:07:51 2026 GMT
            Not After : Aug 25 23:07:51 2026 GMT
        Subject: CN=6a84e5c7-ca63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:7a:87:05:4b:80:d6:f5:7a:29:cb:55:fc:
                    f1:29:95:66:51:43:d1:e9:9f:04:67:e1:c2:1e:d9:
                    77:4c:3d:f3:1a:5e:d3:93:a0:69:d3:0d:a4:88:be:
                    55:83:68:ff:76:39:b0:3d:68:84:e9:2e:91:e6:ab:
                    bf:57:6f:b1:63:71:e8:da:28:e6:dc:15:9f:bc:83:
                    88:f2:a6:17:47:7b:ee:63:34:b3:ab:92:7e:76:d2:
                    d3:95:12:02:68:60:ed:94:cb:4d:e4:3c:30:f5:27:
                    fb:b3:62:e8:70:5d:0a:27:86:3d:5b:26:98:73:f9:
                    52:0e:f4:dd:45:8f:31:2d:e4:41:29:29:57:37:fe:
                    8c:fa:05:cf:6d:5a:97:91:5f:d5:5b:4f:bf:51:81:
                    08:a7:3e:e1:b6:d5:4e:e3:7a:e9:8c:a1:8f:12:35:
                    cf:a7:b6:25:03:8e:7a:d7:fc:7d:7a:0d:c4:94:11:
                    3e:ce:59:8b:73:b1:88:b1:5f:fe:8c:48:ad:ea:d5:
                    15:63:84:30:da:b1:ca:8e:a5:85:91:f6:24:f6:3f:
                    54:14:b9:5a:c6:68:52:dc:c2:96:5f:3e:97:63:86:
                    4b:f3:3f:75:30:46:ba:3a:16:97:c8:bb:37:db:f5:
                    ec:df:25:3a:38:f1:6e:b0:e2:60:ce:7e:06:3a:2b:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:38:FC:A0:09:54:43:04:08:BA:B5:9B:4D:3E:BE:4B:57:6B:3D:4B
            X509v3 Authority Key Identifier:
                keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:cf:d5:c3:dc:6d:a1:92:cb:6f:74:34:a2:fc:63:ce:bb:
         01:5b:4f:74:55:ad:8d:45:b1:82:05:a3:2b:73:fc:be:6c:13:
         46:66:88:de:cd:29:45:59:1d:22:09:b2:c8:43:59:3c:24:51:
         cd:90:fa:cb:1d:c0:80:b9:dd:12:b9:55:f1:30:51:60:db:e4:
         9d:72:96:c6:04:02:b8:0e:b2:4c:e0:1a:ee:d9:58:13:17:b1:
         26:f8:0c:eb:d7:a3:d8:79:4d:7c:55:80:c3:57:51:b1:6b:be:
         3e:39:83:de:03:d7:60:07:c6:1c:ac:50:b9:f5:71:b0:7e:44:
         d6:a4:84:bd:42:67:dc:3e:2d:bd:7f:ad:97:05:bc:0b:79:97:
         5f:c9:2c:d8:f8:85:58:41:b2:00:8e:a4:4e:57:1e:94:76:a9:
         59:6d:bd:51:eb:4e:46:dc:69:c9:01:39:9e:fe:89:c4:eb:93:
         31:39:68:9b:a8:f9:4f:7b:3b:61:54:8f:2c:af:01:d1:01:92:
         bf:cf:54:ad:ce:49:43:11:8a:c9:33:97:59:9f:35:71:36:6c:
         6b:8f:86:21:f8:c9:7e:c7:b0:dd:f2:c3:e2:c7:7c:3f:b3:c2:
         bd:27:28:f8:b4:07:54:d0:8d:e5:f5:96:e2:8b:90:a0:7d:11:
         a7:45:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:49 2026 by rpki-client